Browse CVEs

MEDIUM 5.5 CVE-2022-20538 In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side cha… Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20552 In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free. This could lead to local inform… Android Patch available Fix from $1,6002022-12-16 HIGH 7.8 CVE-2022-20520 In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to local escalation of privilege or denial of server wit… Android Patch available Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20522 In getSlice of ProviderModelSlice.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user wit… Android Patch available Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20524 In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege wi… Android Patch available Fix from $1,9502022-12-16 HIGH 7.5 CVE-2022-20516 In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote inform… Android Patch available Fix from $1,9502022-12-16 MEDIUM 6.7 CVE-2022-20514 In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.cpp, there is a possible out o… Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20515 In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the Settings app due to a confused… Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20517 In getMessagesByPhoneNumber of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local in… Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20518 In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosur… Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20523 In IncFs_GetFilledRangesStartingFrom of incfs.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local inf… Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20527 In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20531 In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. … Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.3 CVE-2022-20530 In strings.xml, there is a possible permission bypass due to a misleading string. This could lead to remote information disclosure of call logs with … Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.0 CVE-2022-20521 In sdpu_find_most_specific_service_uuid of sdp_utils.cc, there is a possible way to crash Bluetooth due to a missing null check. This could lead to l… Android Patch available Fix from $1,6002022-12-16 HIGH 7.8 CVE-2022-20503 In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permission che… Android Patch available Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20506 In onCreate of WifiDialogActivity.java, there is a missing permission check. This could lead to local escalation of privilege from a guest user with … Android Patch available Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20507 In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due to a missing bounds check. Thi… Android Patch available Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20508 In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a permissions bypass. This could l… Android Patch available Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20512 In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched intent due to improper input validation. This cou… Android Mitigation only Fix from $1,9502022-12-16 MEDIUM 6.7 CVE-2022-20504 In multiple locations of DreamManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and dismissa… Android Patch available Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20505 In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of priv… Android Patch available Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20509 In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation … Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20199 In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy. This could lead to local information d… Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20510 In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the notification streaming policy … Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20511 In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. This could lead to local information disclosu… Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20513 In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo… Android Patch available Fix from $1,6002022-12-16 HIGH 8.8 CVE-2022-4437 Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 108.0.5359.124+ Fix from $1,9502022-12-14 HIGH 8.8 CVE-2022-4438 Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI int… Chrome 108.0.5359.124+ Fix from $1,9502022-12-14 HIGH 8.8 CVE-2022-4439 Use after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI … Chrome 108.0.5359.124+ Fix from $1,9502022-12-14